WHAT IS CLAIMED IS: 



1 . A method, comprising: 

processing a request from a client, wherein the request initiates or continues a 
session between a server and the client; 

streaming out content from the server to the client as a partial fulfillment of the 
request; 

while processing the request: 

determining if the content should be disabled; and 

if the content should be disabled, disabling the content without terminating 
the session. 

2. The method of claim 1, wherein said determining comprises detecting an 
occurrence of a security violation during said processing. 

3. The method of claim 1, wherein said determining comprises detecting an 
occurrence of a process timeout. 

4. The method of claim 1, wherein said disabling comprises preventing the 
client from accessing content referenced by a hyperlink associated with the content 
streamed to the client. 

5. The method of claim 4, wherein said preventing comprises: 
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maintaining a lookup table of all hyperlinks associated with the content streamed 
to the client; and 

invalidating the hyperlinks by modifying said lookup table to redirect the 
5 hyperlinks to an error message. 

6. The method of claim 1, wherein said disabling comprises instructing a 
controller on the client to disable content received by the client. 

10 7. The method of claim 6, wherein the controller is provided by the server 

independent from any application running on the server. 

8. The method of claim 6, wherein the controller is specific to an application 
running on server. 

15 

9. The method of claim 6, wherein the controller is operable to disable the 
content by prohibiting the content from being copied or saved. 

10. The method of claim 6, wherein the controller is provided by the client. 

20 

1 1 . The method of claim 6, wherein the controller is sent to the client. 

12. The method of claim 1 1, wherein the controller is sent to the client at the 
beginning of the session. 

25 

13. The method of claim 11, wherein the controller is sent to the client upon 
determining that the content should be disabled. 

14. A system, comprising: 
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one or more processors; and 

memory accessible by the one or more processors and configured to store program 
instructions executable by the one or more processors to implement a 
server configured to: 

process a request from a client, wherein said request initiates or continues 
a session between the server and the client; 

stream out content from the server to the client as a partial fulfillment of 
the request; 

wherein the server comprises a content disabling mechanism configured 
to: 

determine if the content should be disabled while processing said 
request; and 

if the content should be disabled, disable the content without 
terminating said session. 

15. The system of claim 14, wherein the content disabling mechanism is 
configured to determine that said content should be disabled in response to an occurrence 
of a security violation during the processing of the request. 

16. The system of claim 14, wherein the content disabling mechanism is 
configured to determine that said content should be disabled in response to an occurrence 
of a process timeout. 
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17. The system of claim 14, wherein the content disabling mechanism is 
configured to prevent a user from accessing content referenced by a hyperlink associated 
with the content streamed to the client. 

5 18. The system of claim 17, wherein to prevent a user from accessing content 

referenced by a hyperlink, the content disabling mechanism is configured to maintain a 
lookup table of all hyperlinks associated with the content streamed to the client, and 
invalidate one or more of the hyperlinks by modifying said lookup table to redirect the 
one or more hyperlinks to an error message. 

10 

19. The system of claim 14, further comprising a controller, wherein the 
controller is operable by the content disabling mechanism to prevent a user from 
accessing said hyperlink associated with the content. 

15 20. The system of claim 19, wherein the controller is provided by the server 

independent from any application run on the server. 

21. The system of claim 19, wherein the controller is specific to an application 
run by the server. 

20 

22. The system of claim 19, wherein the controller is operable by the content 
disabling mechanism to prohibit the content from being copied or saved. 

23. The system of claim 19, wherein the controller is built into the client. 

25 

24. The system of claim 19, wherein the controller is sent to the client. 

25. The system of claim 24, wherein the controller is sent to the client at the 
beginning of the session. 

30 
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a 

26. The system of claim 24, wherein the controller is sent to the client upon 
determining that said content should be invalidated. 
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